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® A public communication system for encrypted 
audio/video information has various selective entitle- 
ment organizations with respect to its distributed 
receiver station. Such receiver station comprises one 
or more receiver sub-stations for decrypting the re- 
ceived encrypted information by means of a decryp- 
ting key. Furthermore, the receiver station comprises 
one or more decription key sub-stations that may be 
interrogated by the receiver sub-stations and there- 
upon may verify a conditional access requirement, 
and in case of positive verification, forward decryp- 
tion key information to the interogating receiver sub- 
station. Ail said sub-stations are interconnected by a 
^"serial standard bus, so that the configuration of a 
^station is flexibile and may even be altered dynam- 
ically. 
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D 2 8 bus. The bit formats, the composition of the 
messages, the changing-over between modes at 
different bit rates, the organization at the level of 
absent'present acknowledge bits and the like will 
not be described for the sake of brevity. The fol- 
lowing data is present in the receiver sub-station: 

a. its own bus address; this is necessary 
because all bus messages contain the own address 
of the broadcast sub-station; 

b. the permissible standards of the 
audio'video information. This information defines 
the basic types such as those according to PAL, 
NTSC, MAC-family, MUSE and the like. These 
standards are known per se and will not be de- 
scribed herein. Generally speaking, the receiver will 
accept one basic type at a given instant, but it is 
also possible to change the basic type in the case 
of a change-over from one program to another. 

c. specific characteristic data concerning its 
own operation vis-a-vis said serial bus, such as a 
facility for acting as a master station, the intended 
bit rate and other feasible bit rates, and the amount 
of buffer space which is directly available for the 
storage of information. 

d. the actually received or the basic type 
which can be directly received for the AV 
(audio/video) signal; 

e. possibly a presence table for the decryp- 
tion key sub-stations which are suitable for the 
respective basic types permissible in the receiver 
sub-station as regards the audio/video signals. The 
relevant decryption key sub-stations, therefore, can 
be addressed by the receiver sub-station con- 
cerned. Thus, for each decryption key sub-station 
such a table may contain: 

- a sequence number of the decryption key-sub- 
station in question 

- a sub-station address 

- basic type of the audio/video signal 

- type of the conditional access to the audio/video 
signal, such as at the moment, for example 
NRMSK, Eurocript-NTA/Philips, Eurocypher, 
Eurocrypt-CCETT/CanalPlus. Ftlmnet (analog); with 
the type there are associated directly the 
encoding/encryption format, the key words, 
formulation/formating of the entitlement; the above 
types themselves are subject to standardization; 

- possibly CAS-accounting system; this provides 
the name of the relevant organization, such as 
"CanalPlus". "Scansat"; 

f. a table for storing the variables involved in 
the decryption process. In given cases a receiver 
sub-station is capable of performing a plurality of 
decryption processes simultaneously. Thus, for 
each type of code the table may contain: 

- a reference sequence number which can act so 
as to identify the decryption process (together with 
the bus address of the decryption key sub-station) 



using in the relevant key word; this sequence num- 
ber may therefore, be included in the bus protocol; 

- a code which indicates which ser/ice or services 
as represented by the audio/video signal can be 

5 offered by the relevant process; 

- a code which indicates whether the relevant ser- 
vice is free of charge, i.e. freely accessible, or 
whether decryption must be performed by means 
of key information which is not available free of 

jo charge, and an indication of the decryption key or 
the whole decryption key or a part thereof, for use 
in the receiver sub-station; 

- a code which indicates that, even if the 
audio/video information is freely accessible, a de- 

ts cryption operation must still be performed; - the 
number of the relevant decryption key sub-station. 



CHARACTERISTICS OF A DECRYPTION KEY 
20 SUB-STATION 

Characteristics of a decryption key sub-station 
will be described in detail hereinafter. Generally 
speaking, a decryption key sub-station contains 

25 information associated with a fixed decryption 
mechanism (possibly a number of such mecha- 
nisms). The key itself, and also any accounting 
information, may of course be variable, for example 
in that a positive financial balance is successively 

30 depleted. The stationary information is the follow- 
ing: 

- the bus address of the serial bus in order to be 
addressable as a slave station or as the own ad- 
dress when it acts as a master station, and also 

35 mode information concerning the operation of the 
sub-station vis-a-vis the bus. such as the bit rate; 

- the basic type of the audio/video information, this 
is the signal or broadcast standard (PAL. NTSC, 
etc.) whereto the conditional access, entitlements, 

40 keys and the like relate; 

- the signal standard^ this is the standard (PAL, 
NTSC ... etc.) whereto the entitlements, keys and 
the like relate; 

- the type of conditional access for which the 
45 relevant decryption key sub-station is designed, for 

example the previously described set NRMSK. 
Eurocrypt-NTA/Philips. Eurocypher, Eurocrypt- 
CCETT/CanalPlus. etc. In first instance a single 
decryption key sub-station will act on a single type 
so of conditional access; 

• the name of the organization/agency which is the 
supplier of the information and/or distributes the 
entitlements in the system, for example CanalPius. 
etc.; 

55 - a unique customer number which is used, for 
example for bookkeeping purposes. 

A decryption key sub-station may be capable 
of performing ' various processes within a given 
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for use in a station in accordance with the inven- 
tion. 



SYSTEM DESCRIPTION 

Fig. 1 shows a pubiic communication system in 
accordance with the invention. Block 20 represents 
a broadcasting sub-system which in this case com- 
prises a parabolic aerial 22 for broadcasting audio 
and/or video information in the form of programs. 
This information is encrypted by means of a pre- 
determined encryption key. This key, or at least the 
key which is required for decryption, is not gen- 
erally known. The information reaches a satellite 24 
in which it is amplified and retransmitted to a 
terrestrial parabolic aerial 26. Block 28 represents a 
demodulator/controller. This device amplifies the 
analog signals, performs FM demodulation, con- 
verts the demodulated signal into a bit stream, 
controls the position of the aerial 26, if necessary, 
etc. This bit stream is applied to receiver sub- 
stations 30, 32. Therein the information received is 
decrypted by means of a decryption key for supply 
to reproduction apparatus 38, 40. Blocks 34, 36 
represent decryption key sub-stations which make 
the decryption key available to receiver sub-sta- 
tions 30, 32, subject to conditions yet to be de- 
scribed. This is realized by communication via the 
serial bus 44. Such a serial bus is described per se 
in United States Patent Specification 4,429,384 and 
is known as a D 2 B bus; the invention, however, is 
not restricted to the use of this bus. A special 
advantage of the D 2 B bus consists in the absence 
of any bus control sub-station. This means that 
inter alia, access requests by the several sub- 
stations can be generated in mutual independence. 
A particular advantage of C^B is that the bus pro- 
tocol allows for various different transmission bit 
rates. The electrical standardization of D 2 B allows 
for many interconnected sub-systems that may be 
located at appreciable distances, such as would 
occur in a home or small office environment. Block 
42 represents a governing accounting 
system/access control system of the kind set forth. 
In the decryption key sub-stations 34, 36 this sys- 
tem activates the decryption key associated with 
the encryption key used in the broadcasting sub- 
station. Activation in the sub-stations 34, 36 can be 
realized, for example via a telephone link via which 
key information is transmitted. Alternatively, this 
information is already present and a selection is 
made between a number of keys. It is also possible 
for a part of the key to be contained in the program 
information so that it forms the actual decryption 
key in conjunction with information from the ac- 
counting system. The receiver sub-stations 30, 32 
comprise user activation inputs 46, 48 such as a 



keyboard or an infrared control element. Thus, a 
selection is possible between "off" and "on" and 
possibly a program selection can be made by a 
user (station selection, channel selection and the 

5 like). The elements 30, 32, 34, 36 and 38, 40 
together constitute a station. 

The system shown in Fig. t may also have a 
different construction; the number of accounting 
systems may be different (larger) and a plurality of 

to receiver sub-stations may be connected to the 
same aerial; on the other hand, each receiver sta- 
tion may also comprise its own decryption key 
sub-station. 

The accounting system may be based on the 
is chip card principle; this card is introduced into the 
decryption key sub-station: the cards and the sub- 
station together contain sufficient information for 
decryption. The chip card may be organized ac- 
cording to the debit principle: the card is pur- 
20 chased by the consumer and represents a given 
value. Depending on the consumption of given 
program information, this value is gradually used 
up. 

The audio/video signal (22, 24, 26) may also be 

25 fully or partly analog. In that case the analog sig- 
nals are processed in the transmitter/receiver; how- 
ever, the value or code of the decryption key is 
then stored in digital form in the decryption key 
sub-stations and communication takes place digital- 

30 ly. The transmission mechanism (22, 24, 26) may 
also be based on a cable organization or a local 
reproduction apparatus. This does not constitute an 
essential difference. In addition to said sub-sta- 
tions, further sub-stations may be connected to the 

35 serial bus. This does not introduce an essential 
difference either. It may be that given information is 
encrypted (the programs) while other information is 
not (for example, commercials and program an- 
nouncements or summaries of the programs). 

4Q Furthermore, organizationally, a particular de- 
cryption key sub-station may be assigned to one or 
more receiver sub-stations. Also, a particular re- 
ceiver sub-station may have one or more decryp- 
tion key sub-stations assigned to it. Also, the phys- 

45 ical topology (as distinct from the logical topoloy) 
may be a single bus stretch, a plurality of stretches 
that connect to a common junction, a closed loop- 
like stretch, or any other configuration according to 
needs and electrical realizeability. 

50 

CHARACTERISTICS OF A RECEIVER SUB-STA- 
TION 

55 Characteristics of a preferred embodiment of a 
receiver sub-station will be described in detail 
hereinafter, in combination with the previously de- 
scribed realization of a serial bus. i.e. the so-called 
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formation indicated by the code corresponds to the 
decryption procedures followed in the receiver sub- 
station. Initially this will not be the case and the 
presence table for the decryption key sub-stations 
will oe consulted. The desired decryption key sub- 
station is then activated, via the bus 72. in order to 
supply the key information as has already been 
stated. The key information received is stored in a 
memory 62 which communicates directly with the 
special decryption device 60. This device receives 
the decrypted information from the input 50 via a 
first-in first-out memory 52. In element 60 decryp- 
tion is performed in a known manner by means of 
a filter. Decryption operations are known per se; for 
brevity they will not be described. After decryption 
the information words are stored in the first-in-first- 
out buffer 56 after which they are applied to the 
relevant reproduction apparatus via output 58. Ar- 
row 54 indicates that the two first-in-first-out buffers 
are coupied; thus, the streams on the lines 50 and 
58 are synchronous; the operation in the element 
60 need not be fully synchronized therewith. Block 
66. or block 62. comprises the memory for storing 
said tables. The organization within the receiver 
station is symbolically represented; the organiza- 
tion at the circuit level may be different. (Depending 
on the required complexity, the respective func- 
tions can be performed by more complex or by 
simpler components. All internal communication 
can take place via a bus or via dedicated connec- 
tions as shown. 

Fig. 3 shows a decryption key sub-station for 
use in a station in accordance with the invention. 
The sub-station 90 comprises an interface element 
82 to the serial bus 80 which aiso provides central 
control for the sub-station. There is aiso provided a 
memory 84 which serves inter alia for the storage 
of the described table information. There is also 
provided an interface element 86 to a chip card 88 
which can be introduced into the decryption key 
sub-station in order to present the entitlement in- 
formation. In this case the decryption key sub- 
station can act as a slave if the entitlements inter- 
rogation by the receiver sub-station occurs suffi- 
ciently frequently. In other cases the decryption 
key sub-station can aiso act as a master station, for 
example for indicating that the chip card has been 
introduced or removed, or for indicating that the 
decryption key sub-station has been activated, or 
deactivated in another manner. 



Claims 

1 A public communication system, comprising 
a broadcast sub-system for broadcasting encrypted 
audio and/or video information, a plurality of distrib- 
uted stations for decrypting of this information after 



reception and for making decrypted information 
available to a reproduction apparatus, and a gov- 
erning accounting system/access control system 
for selectively making one or more decryption keys 

5 available to each station, a station comprising at 
least one decryption key sub-station (CASS) and at 
least one receiver sub-station, all such sub-stations 
within each station being interconnected by means 
of a standard serial bus without a central bus 

w control sub-station, each receiver sub-station com- 
prising means for receiving a current program se- 
lection from a user, storage means for identifying a 
selective accounting system/access control system 
thereby, and accessing means for via said serial 

is bus accessing a decryption key sub-station asso- 
ciated with said selective accounting 
system/access control system, for thereby verifying 
an entitlement for upon verification deriving a de- 
cryption key therefrom, and for enabling a further 

20 accessing operation in case of non-verification of 
said entitlement. 

2. A station for use in a public communication 
system as claimed in Claim 1 and comprising at 
least one receiver sub-station and at least one 

25 decryption key sub-station, all such sub-stations 
being interconnected by means of a serial bus 
without a central bus control sub-station, each re- 
ceiver sub-station comprising means for receiving a 
current program selection from a user, storage 
30 means for storing a local bus address, a list of 
audio/video information standards to be received, 
and characteristic data concerning the operation of 
the receiver sub-station vis-S-vis the serial bus, and 
means for identifying, by way of the program se- 
as lection received, an associated selective account- 
ing system/access control system, for then acces- 
sing an associated decryption key sub-station, for 
thereby verifying an entitlement, and for upon ver- 
ification deriving a decryption key from said de- 
40 cryption key sub-station, and for enabling a further 
accessing operation in case of non-verification of 
said entitlement. 

3. A station for use in a public communication 
system as claimed in Claim 1 and comprising at 

45 least one receiver sub-station and at least one 
decryption key sub-station, all such sub-stations 
being interconnected by means of a serial bus with 
distributed bus control means, each receiver sub- 
station comprising receiving means for receiving a 

so current program selection information from a user, 
identification means for under control of said pro- 
gram selection information identifying an associ- 
ated decryption key sub-station and thereupon ac- 
cessing the latter sub-station via said serial bus. 

55 the latter sub-station having verification means for 
under control of said access verifying an entitle- 
ment information with respect to the program so 
selected, and forwarding means for under control 
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APPLICATION PROTOCOL 
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DESCRIPTION OF TWO SUB-STATIONS 
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of a positive verification forwarding an entitlement 
information for the program so selected via said 
serial bus to the accessing receiver sub-station. 

4. A station as claimed in Clim 3. wherein said 
entitlement information forwarded to said receiving 5 
sub-station comprises decryption key information. 

5. A station as claimed in Claim 2. 3 or 4, 
wherein said serial bus is a D 2 B bus. 

6. A receiver sub-station for use in a station as 
claimed in any of Claims 2 to 5, comprising receiv- 10 
ing means for receiving encypted audio/video in- 
formation inclusive of non-encrypted identification 
information identifying a particular conditional ac- 
cess type as regards said encrypted audio/video 
information, detecting means for detecting said ;s 
identification information, bus interface means to a 
standard serial bus for under control of said detect- 
ing means putting an access request for a decryp- 
tion key sub-station associated to said conditional 
decryption key sub-station receiving either decryp- 20 
tion key information, or alternatively a refusal in- 
formation. 

7. A decryption key sub-station for use in a 
station as claimed in any of Claims 2 to 5, compris- 
ing storage means for storing an entitlement in- 25 
formation, bidirectional bus interface means to a 
distributed-control standard serial bus for receiving 

an entitlement interrogation signal and for transmit- 
ting an entitlement verification signal, and verifica- 
tion means for under control of said entitlement 30 
interrogation signal, selectively in case of a verified 
entitlement, generating said entitlement verification 
signal onto said serial bus. 
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